Privacy Policy
We believe in transparency. Here's exactly how we collect, use, and protect your data on Istanbul Insider Guide.
Quick Links
Privacy Policy Overview
At Istanbul Insider Guide, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website istanbulinsider.com.
This policy applies to all visitors, users, and others who access our services. We are committed to protecting your personal data and being transparent about how we handle it.
Last Updated: 2026
Data Controller Contact
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
-
β
Email: info@istanbulinsider.com
-
π
Website: istanbulinsider.com
GDPR Compliance
We comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws. If you are located in the European Economic Area (EEA), you have specific rights regarding your personal data.
Your GDPR Rights
-
1.
Right to Access: You can request a copy of the personal data we hold about you.
-
2.
Right to Rectification: You can request correction of inaccurate or incomplete data.
-
3.
Right to Erasure: You can request deletion of your personal data (subject to legal obligations).
-
4.
Right to Restrict Processing: You can request we limit how we use your data.
-
5.
Right to Data Portability: You can request your data in a structured, machine-readable format.
-
6.
Right to Object: You can object to certain processing activities.
To exercise these rights, contact us at info@istanbulinsider.com.
Google Analytics Data Collection
We use Google Analytics to understand how visitors use our website. This service collects information about:
- Pages visited and time spent on pages
- Browser type and operating system
- Referring websites
- General geographic location (country/city level)
- Device type (mobile, tablet, desktop)
π What We DON'T Collect:
- Personally identifiable information (names, email addresses, phone numbers)
- Exact location data (GPS coordinates)
- Financial information
Google Analytics uses cookies to collect this information. Your IP address is anonymized before being stored. The data is processed by Google LLC and may be transferred to servers outside the EEA.
You can opt-out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.
Third-Party Services
We may use third-party services that have access to your data. These include:
Google Analytics
Purpose: Website analytics and performance monitoring
Privacy Policy: policies.google.com/privacy
Data: Anonymized usage data only
Cusdis
Purpose: Comment system for blog posts
Privacy Policy: cusdis.com/privacy
Data: Name, email, comment content (if you comment)
Vercel (Hosting)
Purpose: Website hosting and content delivery
Privacy Policy: vercel.com/privacy
Data: Server logs for security and performance
These third parties have their own privacy policies. We encourage you to review them.
Data Security
We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.
β HTTPS Encryption
All data transferred between your browser and our servers is encrypted using SSL/TLS.
β Secure Hosting
Our site is hosted on Vercel's secure infrastructure with industry-standard security practices.
β Limited Access
Only authorized personnel have access to personal data, and only for necessary purposes.
β Regular Updates
We regularly review and update our security practices.
β οΈ Important Note
No method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy:
-
π
Analytics Data: Retained for 26 months (Google Analytics default) then automatically deleted
-
π¬
Comments: Retained indefinitely unless you request deletion, or if they violate our comment policy
-
πͺ
Cookies: Duration varies by cookie type (see Cookie Policy section above)
When you request deletion of your data, we will delete it within 30 days, unless we are required to retain it for legal purposes.
Children's Privacy
Our website is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16.
If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately at info@istanbulinsider.com.
If we discover we have collected personal data from a child under 16 without verification, we will take steps to delete that information.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will:
- Update the "Last Updated" date at the top of this policy
- Notify users of significant changes via a site notice
- Post the new policy on this page
Your Continued Use
By continuing to use our website after changes are posted, you acknowledge and accept the updated Privacy Policy. We encourage you to review this policy periodically.
Legal Basis for Processing (GDPR)
Under the GDPR, we must have a legal basis for processing personal data. Our legal bases are:
Legitimate Interest
For analytics and website optimization. We have a legitimate interest in understanding how visitors use our site to improve it.
Contractual Necessity
When you post comments, processing is necessary for the functionality you requested.
Legal Obligation
We may retain certain data to comply with legal obligations, such as record-keeping requirements.
Consent
Where you have given explicit consent, such as opting in to specific tracking or features.
International Data Transfers
Your personal data may be transferred to and processed in countries other than your country of residence. This includes:
- United States: Google Analytics data is processed by Google LLC in the US
- EU/EEA: Cusdis is hosted in the European Union
- Global: Vercel's CDN may serve content from various global locations
When we transfer data outside the EEA, we ensure appropriate safeguards are in place, including:
-
β
Standard Contractual Clauses (SCCs) where required
-
β
EU-US Data Privacy Framework participation where applicable
-
β
Compliance with GDPR Chapter V requirements
Still Have Questions?
We're happy to clarify anything about our privacy practices. Don't hesitate to reach out.
Contact Us
Comment System (Cusdis)
We use Cusdis as our comment system on blog posts. When you leave a comment:
How Your Comment Data is Used
Your Comment Rights
You have the right to:
Contact info@istanbulinsider.com for these requests.